QUESTION: 173

A developer is modifying an existing AWS Lambda function.
While checking the code,
the developer notices hardcoded parameter values for an Amazon RDS for SQL Server user name, password, database, host, and port. There are also hardcoded parameter values for an Amazon DynamoDB table, an Amazon S3 bucket, and an Amazon Simple
Notification Service (Amazon SNS)
topic.
The developer wants to securely store the parameter values outside the code in an encrypted format and wants to turn on rotation for the credentials. The developer also wants to be able to reuse the parameter values from other applications and to update the parameter values without modifying code.
Which solution will meet these requirements with the LEAST operational overhead?

Create an RDS database secret in AWS Secrets Manager. Set the user name,
password, database, host, and port. Turn on secret rotation. Create encrypted Lambda environment variables for the DynamoDB table, S3 bucket,
and SNS topic.
Create an RDS database secret in AWS Secrets Manager. Set the user name,
password, database, host, and port. Turn on secret rotation. Create
SecureString parameters in AWS Systems Manager Parameter Store for the
DynamoDB table, S3 bucket, and SNS topic.
Create RDS database parameters in AWS Systems Manager Parameter Store for the user name, password, database, host, and port. Create encrypted Lambda environment variables for the DynamoDB table, S3 bucket, and SNS topic.
Create a Lambda function and set the logic for the credentials rotation task. Schedule the credentials rotation task in Amazon EventBridge.
Create RDS database parameters in AWS Systems Manager Parameter Store for the user name, password, database, host, and port. Store the DynamoDB table,
S3 bucket, and SNS topic in Amazon S3. Create a Lambda function and set the logic for the credentials rotation. Invoke the Lambda function on a schedule.

Answer(s): B

Reveal Solution Next Question

QUESTION: 174

A developer accesses AWS CodeCommit over SSH. The SSH keys configured to access AWS
CodeCommit are tied to a user with the following permissions:
The developer needs to create/delete branches.
Which specific IAM permissions need to be added, based on the principle of least privilege?

"codecommit:CreateBranch"
"codecommit:DeleteBranch"
"codecommit:Put*"
"codecommit:Update*"
"codecommit:*"

Answer(s): A

Reveal Solution Next Question

QUESTION: 175

An application that is deployed to Amazon EC2 is using Amazon DynamoDB. The application calls the DynamoDB REST API. Periodically, the application receives a
ProvisionedThroughputExceededException error when the application writes to a
DynamoDB table.
Which solutions will mitigate this error MOST cost-effectively? (Choose two.)

Modify the application code to perform exponential backoff when the error is received.
Modify the application to use the AWS SDKs for DynamoD
Increase the read and write throughput of the DynamoDB table.
Create a DynamoDB Accelerator (DAX) cluster for the DynamoDB table.
Create a second DynamoDB table. Distribute the reads and writes between the two tables.

Answer(s): A,B

Reveal Solution Next Question

QUESTION: 176

When a developer tries to run an AWS CodeBuild project, it raises an error because the length of all environment variables exceeds the limit for the combined maximum of characters.
What is the recommended solution?

Add the export LC_ALL="en_US.utf8" command to the pre_build section to ensure POSIX localization.
Use Amazon Cognito to store key-value pairs for large numbers of environment variables.
Update the settings for the build project to use an Amazon S3 bucket for large numbers of environment variables.
Use AWS Systems Manager Parameter Store to store large numbers of environment variables.

Answer(s): D

Reveal Solution Next Question

Free AWS Certified Developer - Associate DVA-C02 Exam Braindumps (page: 44)

QUESTION: 173

QUESTION: 174

QUESTION: 175

QUESTION: 176